CVE-2026-64370

A flaw was found in the Linux kernel's posix-cpu-timers component. This vulnerability allows a local user to trigger a resource leak within the do_cpu_nanosleep() function. The issue occurs because a process identifier (PID) reference is not properly released if a timer creation operation fails. This unreleased resource can accumulate over time, potentially leading to a denial of service (DoS) due to system resource exhaustion.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.